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IKE Fragmentation 

Larger key sizes required to key AES (3072 bits) result in larger certs, possible 
IKE fragmentation; Section 5.6 contains no normative statements (a problem ... 
www.ietf.org/proceedings/ 02mar/slides/ips-10/tsld003.htm - 2k - Cached - Similar pages 
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Using IPsecfor Network Protection: Part 1 of 2 

IKE fragmentation. It's common that the payload of a digital certificate will 

... The NAT discovery phase also checks for support of IKE fragmentation and ... 

www.microsoft.com/technet/security/ secnews/articles/itproviewpoint121504.mspx - 31k - Cached - Similar pages 
Configuring Firewalls 

IKE with certificate or Kerberos authentication requires ISAKMP packets to be 
... Server 2003 implements a method to avoid IKE message fragmentation. ... 

www.microsoft.com/.. 7prodtechnol/windowsserver2003/ library/depkit/6E268195-6750-494A-8F19- 
25D0791 1926F.mspx - 23k - Cached - Similar p ages 



How to build a remote user access VPN 

In order to address that problem, we use IKE fragmentation, which is an IKE 
extension used to fragment the IKE packets into smaller fragments. ... 
netbsd.org/Documentation/network/ipsec/rasvpn.html - 29k - Cached - Similar pages 



[Pki4ipsec] Re:[lpsec ] big IKE packets 

[Pki4ipsec] Re:[lpsec] big IKE packets. Ravi Kumar ravivsn@rocsys.com ... to the 
problem of large IKE packets > > (that require fragmentation) wouldn't be ... 
honor.icsalabs.com/pipermail/ pki4ipsec/2004-September/000523.html - 5k - Cached - Similar pages 

[Pki4ipsec] [Ipsec] big IKE packets 

Previous message: [Pki4ipsec] Re: [Ipsec] big IKE packets ... one solution to 
the problem of large IKE packets > (that require fragmentation) wouldn't be to ... 
honor.icsalabs.com/pipermail/ pki4ipsec/2004~September/000507.html - 4k - Cached - Similar pages 

Re:[lpsec] big IKE packets 

The IP packets already > offers fragmentation, why should we do it again on the 
... him to be able to > make IKE fragmentation to the IPsec stack of the OS? ... 

www.sandelman.ottawa.on.ca/ipsec/2004/09/msg00014.html - 7k - Cached - Similar pages 

Cisco VPN Concentrator Groupname Enumeration Vulnerability 

The exploit involves sending an IKE Aggressive Mode packet with the groupname to be 

... VID=4048b7d56ebce88525e7de7f00d6c2d3c0000000 (IKE Fragmentation) ... 

www.nta-monitor.com/.../cisco/VPN-Concentrator/ cisco-concentrator-groupname-enumeration~vulnerability.htm - 10k - 
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SecurityTracker.com Archives - Cisco VPN 3000 Lets Remote Users ... 
The vulnerability is present in both normal IKE over UDP, and also Cisco proprietary 
... VID=4048b7d56ebce88525e7de7f00d6c2d3c0000000 (IKE Fragmentation) ... 

www.securitytracker.com/alerts/2005/Jun/1014246.html - 24k - Cached - Similar pages 
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